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Features of Basic AlliedWare 7 



Standard features: 
Point-to-Point Protocol (PPP) 
Internet Protocol (IP) 
RIP 

Test Facility 

Generic Routing Encapsulation 
Logging Facility 
HTTP Server 
TFTP Client 

Command Line Interface (CLI) 
Layer 2 Tunneling Protocol (L2TP) 
Compression Service 
ISAKMP 

Product specific features: 
Allied Telesyn product series 



PPPoE 

IP Multicasting 

Open Shortest Path First (OSPF) 

Network Time Protocol (NTP) 

Trigger Facility 

Scripting 

HTTP Client 

TCP 

Dynamic Host Configuration Protocol (DHCP) 
Simple Network Management Protocol (SNMP) 
Internet Group Management Protocol (IGMP) 
Secure Shell (SSH) 



AT-AR300 AT-AR400 AT-AR700 Rapier Rapier T AT-9800 AT-SB4000 AT-8700XL 



Generic Attribution Registration Protocol (GARP) 



General Packet Classifier 



Quality of Service 



Frame Relay 



Integrated Services Digital Network (ISDN) 



X.25 



Synchronous Tunneling (STT) 



Novell IPX 



DECnet 



Terminal Server 



Printer Server 



Bridging 



Asynchronous Call Control (ACC) 



AppleTalk 



Time Division Multiplexing (TDM) 



Telephony Services 



Graphical User Interface 



VLAN 



STP 



RSTP 



Transaction Packet Assembler Disassembler (TPAD) 



Resource Reservation Protocol (RSVP) 



Encryption Service 



IP Security (IPSec) 



Virtual Router Redundancy Protocol (VRRP) 



Open Systems Interconnection 
Secure Sockets Layer (SSL) 



IGMP PROXY 



PIM-SM 



PIM-DM 



DVMRP 



Compact Flash 



Note: 



Feature is available in base release of this product. (Feature licenses are not included in this matrix). 



AlliedWare, Layer 3 Fully Featured Operating System 

AlliedWare™ is Allied Telesyn's feature-rich OS that serves 
as the foundation for its entire line of Layer 3 switches and 
routers. It not only includes all the functionality, manage- 
ment capabilities and performance today's networks 
demand, but as a standards-based implementation, it also 
assures full interoperability with all other major network 
equipment vendors allowing operational investment 
protection for training, management and monitoring. The 
table to the left lists the standard features included in all 
Allied Telesyn Layer 3 switches and routers. 

STATEFUL INSPECTION FIREWALL 

Allied Telesyn's state-of-the-art ICSA-certified Stateful 
Inspection firewall provides the highest level of security 
possible by providing full application-layer awareness 
without breaking the client/server model. Stateful 
Inspection extracts the state-related information required 
for security decisions from all application layers and 
maintains this information in dynamic state tables for 
evaluating subsequent connection attempts. It protects 
against a wide range of Denial of Service (DoS) attacks 
including Ping of Death, SYN/FIN flooding, Smurf 
attacks, port scans, fragment attacks and IP spoofing. E-mail 
alerts are automatically triggered when such attacks are 
detected. This provides a solution that is highly secure and 
offers maximum performance, scalability, and extensibility. 

APPLICATION GATEWAYS 
(SMTP PROXY, HTTP PROXY) 

SMTP Proxy inspects SMTP packets as they pass through 
the firewall. By accepting or rejecting packets based on 
source and destination address rules, abuse of e-mail 
servers is limited. Typical forms of e-mail abuse include 
receipt of unwanted advertisements, spam, and unautho- 
rized forwarding of mail. HTTP proxy inspects and filters 
outbound HTTP sessions as they pass through the firewall. 
The Proxy can inspect URLs and restrict cookie activity. 



ABOUT ALLIED TELESYN 

Allied Telesyn leads the world in network technologies 
for the access edge. Since the company's inception in 
1 987, Allied Telesyn has been developing IP-based net- 
work products for use in video, voice and data networks 
at the metro edge, in education, government agencies and 
across the enterprise. Allied Telesyn's access, aggregation 
and core transport technologies range from simple 
Ethernet adapters, hubs and media converters to robust 
multi-layer Gigabit Ethernet switches and routers, wire- 
less systems, DTM and WDM transport solutions for 
delivering real-time voice, video and data. Allied Telesyn's 
comprehensive support and professional service pro- 
grams are suited to meet the growing demands of today's 
switched broadband infrastructures. 



SERVICE & SUPPORT 

Allied Telesyn provides value-added support services for 
its customers under its Net.Cover s " programs. For more 
information on Net.Cover s " support programs available 
in your area, contact your Allied Telesyn sales represen- 
tative or visit our website. 

www.alliedtelesyn.com 
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BGP4 

External gateway protocol which allows two routers in dif- 
ferent routing domains, known as Autonomous Systems 
(AS), to exchange routing information, thereby facilitating 
the forwarding of data across the border of the routing 
domains. BGP allows routers to learn multiple paths, 
choose the best path for routing information and install 
that path in the IP routing table. 

RSVP 

RSVP is a signaling protocol designed to provide guaranteed 
QoS (Quality of Service) for network traffic. To allow 
hosts and applications that do not support RSVP to take 
advantage of RSVP services, AlliedWare™ implements a 
RSVP proxy agent. 

DVMRP 

DVMRP is an Internet routing protocol that provides an 
efficient mechanism for connectionless datagram delivery 
to a group of hosts across an internetwork. It uses a dis- 
tance vector distributed routing algorithm to dynamically 
generate and maintain IP Multicast delivery trees. 

AlliedWare™ supports DVMRP version 3 as specified in 
Internet Draft "Distance Vector Multicast Routing Protocol 
Version 3", September 1999 (draft-ietf-idmr-dvmrp-v3-09). 

PIM-DENSE MODE (DM) 

PIM-DM is similar to DVMRP in that it employs the 
RPM algorithm, however, PIM-DM relies on the presence 
of an existing unicast routing protocol to provide routing 
table information to build up information for the multicast 
forwarding database but is independent of the mecha- 
nisms of the specific unicast routing protocol. In contrast, 
DVMRP contains an integrated routing protocol that 
makes use of its own RIP-like exchanges to compute the 
required unicast information. 

PIM-SPARSE MODE (SM) 

PIM-SM provides efficient communication between 
members of sparsely distributed groups - the type of 
groups that are most common in wide-area internet- 
works. PIM-SM is designed to limit multicast traffic so 
that only those network devices interested in receiving 
traffic for a particular group receive the traffic. 



IPv6 

IPv6 is the next generation of the Internet Protocol (IP). 
It has primarily been developed to solve the problem of 
the eventual exhaustion of the IPv4 address space, but also 
offers other enhancements: 

• Addresses are 1 6Bytes long in contrast 
to IPv4's 4Byte addresses. 

• Globally unique addresses with more levels of addressing 
hierarchy, to reduce the size of routing tables. 

• Auto-configuration of addresses by hosts. 

• Improved scalability of multicast routing, by 
adding a 'scope' field to multicast addresses. 

• A new type of address, the 'anycast address,' which is 
used to send a packet to any one of a group of devices. 

ISIS 

Intermediate-to-intermediate System is an OSI routing 
protocol for dynamic routing between intermediate and 
end network devices. 

LOAD BALANCER 

Load Balancing increases network efficiency by distributing 
network loads across defined resource pools, such as fire- 
walls, servers or other network equipment allowing network 
managers to control load distribution. For example, a load 
balancer can monitor incoming HTTP traffic and distribute 
it evenly or preferentially across multiple servers. 

The load balancing enables feature-rich Layer 3 to 7 load 
balancing on the user's existing switch or router providing 
an economical alternative to dedicated load balancing 
hardware. With up to 32 virtual load balancers, each device 
can balance the load on up to 32 different resource pools 
with four fundamental types of load balancing: 

• TCP load balancing. Examines the IP address of packets 
and balances TCP services. 

• Route-based load balancing. Ideal for balancing 
multiple firewalls. 

• HTTP load balancing.These load balancers are ideal 
for balancing web servers. 

• SSL load balancing.These load balancers 
balance secure traffic. 



UPGRADE FEATURES 



Software AT-AR300 AT-AR400 AT-AR700 Rapier Rapier? AT-9800 AT-SB4000 AT-8700XL 



Full L3 N/A N/A N/A IPX Routing IPX Routing Appletalk Appletalk N/A 

Appletalk Appletalk RSVP RSVP 

RSVP RSVP PIM DM PIM DM 

PIM DM PIM DM DVMRP DVMRP 

DVMRP DVMRP PIM SM PIM SM 

PIM SM PIM SM VRRP VRRP 



Advanced L3 N/A IPv6 IPv6 IPv6 IPv6 IPv6 IPv6 N/A 

BGP4 BGP4 BGP4 BGP4 BGP4 BGP4 

MPLS (when released) MPLS(when released) MPLS(when released) MPLS (when released) MPLS(when released) MPLS(when released) 

Load balancing Load balancing Load balancing Load balancing Load balancing Load balancing 

OSI OSI 

Security Package ► N/A 

includes Firewall, SMTP Proxy and HTTP Proxy 

Note: Basic L2/L3 software ships with the product. 



USA Headquarters: 19800 North Creek Pkwy, Suite 200, Bothell. WA 98011, USA Tel 
European Headquarters: Via Motta 24, 6830 Chiasso, Switzerland (Corporate) Tel 

(European Sales) Tel 

www.alliedtelesyn.com 



800.424.4284 
(+41) 91 697.69.00 
(+39) 02 414.1 12.1 



425.481.3895 
(+41) 91 697.69.11 
(+39) 02 414.112.61 



ORDERING INFORMATION 
FULL L3 UPGRADES 

AT-ARRPFL3UPGRD 

Rapier full Layer 3 upgrade 

AT- AR9800F L3 U PG RD* 

AT-9800 full Layer 3 upgrade 

AT-AR-SBFL3UPGRD* 

AT-SB4000 full Layer 3 upgrade 

ADVANCED L3 UPGRADES 

AT-AR400-ADVL3 U PG RD 

AR400 series advanced Layer 3 upgrade 

AT-AR700-ADVL3 U PG RD 

AR700 series advanced Layer 3 upgrade 

AT-RPADVL3UPGRD 

Rapier series advanced Layer 3 upgrade 

AT-9800 ADVL3 U PG RD 

AT-9800 series advanced Layer 3 upgrade 

AT-ARSB4000ADVL3UPGRD 

AT-SB4000 advanced Layer 3 upgrade 

SECURITY PACKS 

AT-AR300v2SecPk-00 

AR300 router security pack 

AT-AR400sSecPk-00 

AR400 router security pack 

AT-AR700sSecPk-00 

AR700 router security pack 

AT-RPSecPk-00 

Rapier Layer 3 switch security pack 

AT-9800SecPk-00 

AT-9800 Layer 3 switch security pack 

AT-SB4000SecPk 

AT-SB4000 security pack 

* Included in North American products 
as part of their base configuration. 

Free registration required in other regions. 
OPTIONS 
AT-3DES 

Triple DES encryption for AT-AR series 
routers and Rapier series products 
(hw encryption card req'd.) 

AT-ARO I I i ECMAC 

Hardware-based DES and 3DES encryption, 
hardware-based compression (AT-3DES feature 
license required for 3DES) 

AT-AR06I ECPAC 



Hardware-based DES and 3DES encryption, 
hardware-based compression (AT-3DES feature 
license required for 3DES) 
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